A critical authentication and authorization bypass vulnerability in the kcp control plane allows unauthenticated remote attackers to manipulate the cache server.

The cache server is exposed by the root shard without any authentication or authorization checks. This allows any unauthenticated attacker with network access to the root shard to read or modify data within the cache server.

The absence of access controls on the cache server poses a significant risk to the integrity and confidentiality of the control plane. An attacker could potentially inject malicious data or exfiltrate sensitive configuration information, leading to unauthorized system control or service disruption. Given the CVSS score of 8.2, this vulnerability represents a high-severity threat that requires immediate remediation to prevent unauthorized data manipulation.

Immediate Action: Upgrade the kcp installation to version 0.30.3 or 0.29.3 to implement mandatory authentication and authorization for the cache server.

Proactive Monitoring: Review network access logs for the root shard to identify unauthorized connection attempts or unusual read and write activity directed at the cache server.

Compensating Controls: Restrict network access to the root shard using firewall rules or network policies to ensure that only trusted administrative systems can reach the service until patching is complete.

Public Exploit Available: No (exploit_available: false)

This vulnerability is highly severe because it permits unauthenticated access to critical control plane components. Administrators must prioritize updating to the fixed versions, 0.30.3 or 0.29.3, to restore access control. If immediate patching is not feasible, ensure the root shard is isolated from public networks to mitigate the risk of unauthorized exploitation.